Static task
static1
Behavioral task
behavioral1
Sample
0e215e1dbf1c42676137c02306db523a_JaffaCakes118.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0e215e1dbf1c42676137c02306db523a_JaffaCakes118.exe
Resource
win10v2004-20240611-en
General
-
Target
0e215e1dbf1c42676137c02306db523a_JaffaCakes118
-
Size
63KB
-
MD5
0e215e1dbf1c42676137c02306db523a
-
SHA1
bfe8648c877797ba29fe39e2f2414c6e2a111671
-
SHA256
311955a05e810a88667004c7365e447120bcca095f84e10cefe1fbf662a4adb7
-
SHA512
127ae0a4a4da9e0a0d0170c8cbbc5e01f691d5df442f52611848213569e36727d4f945cd52eb40cb75b15e0914c98778e65658d4aa6ff0dee4dadcf53eb49cb0
-
SSDEEP
1536:r3qIIWHIcsyjj4PZAPaJm/GiDu7wEqeNH:r3qFUsksPq/GiEwy
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0e215e1dbf1c42676137c02306db523a_JaffaCakes118
Files
-
0e215e1dbf1c42676137c02306db523a_JaffaCakes118.exe .ps1 windows:4 windows x86 arch:x86 polyglot
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 63KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE